refactor

hosts/apu/configuration.nix

@@ -218,7 +218,7 @@
     };
   };
 
-  modules.services.webserver = {
+  services.webserver = {
     enable = true;
     acme.dnsChallenge = true;
     vHosts."koti.repomaa.com" = {

hosts/freun.dev/services.nix

@@ -28,20 +28,6 @@ in
   };
 
   modules.services = {
-    vaultwarden = {
-      enable = true;
-      subdomain = "pw";
-      config = {
-        YUBICO_CLIENT_ID = 86799;
-        SMTP_HOST = smtp.host;
-        SMTP_FROM = smtp.from;
-        SMTP_FROM_NAME = "Vaultwarden";
-        SMTP_USERNAME = smtp.username;
-        SMTP_PORT = smtp.port;
-        HELO_NAME = smtp.heloName;
-      };
-    };
-
     immich = {
       enable = true;
       subdomain = "img";
@@ -49,55 +35,6 @@ in
       storageDirs = [ syncthingDataDir ];
       version = "v1.125.7";
     };
-
-    syncthing = {
-      enable = true;
-      subdomain = "sync";
-      dataDir = syncthingDataDir;
-    };
-
-    gotosocial = {
-      enable = true;
-      subdomain = "social";
-      settings = {
-        smtp-host = smtp.host;
-        smtp-port = smtp.port;
-        smtp-username = smtp.username;
-        smtp-from = smtp.from;
-      };
-    };
-
-    workout-tracker = {
-      enable = true;
-      subdomain = "fit";
-    };
-
-    workout-sync = {
-      enable = true;
-      subdomain = "ws";
-    };
-
-    invidious = {
-      enable = true;
-      subdomain = "vid";
-    };
-
-    grafana = {
-      enable = true;
-      subdomain = "graph";
-    };
-
-    gtrackmap = {
-      enable = true;
-      subdomain = "trackmap";
-    };
-
-    owncast = {
-      enable = true;
-      subdomain = "stream";
-    };
-
-    tailscale.enable = true;
   };
 
   services = {
@@ -130,5 +67,77 @@ in
         };
       };
     };
+
+    grafana = {
+      enable = true;
+      subdomain = "graph";
+      settings.smtp = {
+        enabled = true;
+        host = smtp.host;
+        port = smtp.port;
+        user = smtp.username;
+        from_address = smtp.from;
+      };
+    };
+
+    owncast = {
+      enable = true;
+      subdomain = "stream";
+    };
+
+    gtrackmap = {
+      enable = true;
+      subdomain = "trackmap";
+      port = 3001;
+    };
+
+    invidious = {
+      enable = true;
+      subdomain = "vid";
+    };
+
+    syncthing = {
+      enable = true;
+      subdomain = "sync";
+      dataDir = syncthingDataDir;
+    };
+
+    tailscale.enable = true;
+
+    gotosocial = {
+      enable = true;
+      subdomain = "social";
+      settings = {
+        smtp-host = smtp.host;
+        smtp-port = smtp.port;
+        smtp-username = smtp.username;
+        smtp-from = smtp.from;
+        instance-languages = [ "de" "fi" "en" ];
+      };
+    };
+
+    vaultwarden = {
+      enable = true;
+      subdomain = "pw";
+      config = {
+        YUBICO_CLIENT_ID = 86799;
+        SMTP_HOST = smtp.host;
+        SMTP_FROM = smtp.from;
+        SMTP_FROM_NAME = "Vaultwarden";
+        SMTP_USERNAME = smtp.username;
+        SMTP_PORT = smtp.port;
+        HELO_NAME = smtp.heloName;
+      };
+    };
+
+    workout-tracker = {
+      enable = true;
+      subdomain = "fit";
+    };
+
+    workout-sync = {
+      enable = true;
+      subdomain = "ws";
+    };
   };
 }

modules/services/donetick.nix

@@ -204,7 +204,7 @@ in
       confinement.enable = true;
     };
 
-    modules.services.webserver = {
+    services.webserver = {
       enable = lib.mkDefault true;
       vHosts.${fqdn}.locations."/" .proxyPort = cfg.settings.server.port;
     };

modules/services/gotosocial.nix

@@ -1,47 +1,36 @@
 { config, lib, ... }:
 let
-  cfg = config.modules.services.gotosocial;
+  cfg = config.services.gotosocial;
   secrets = config.age.secrets;
   domain = config.networking.domain;
   fqdn = "${cfg.subdomain}.${domain}";
-  port = cfg.port;
+  port = cfg.settings.port;
 in
 {
-  options.modules.services.gotosocial = {
+  options.services.gotosocial = {
-    enable = lib.mkEnableOption "Enable Gotosocial";
     subdomain = lib.mkOption {
       type = lib.types.str;
     };
-    port = lib.mkOption {
-      type = lib.types.int;
-      default = 3500;
-    };
-    settings = lib.mkOption {
-      type = lib.types.attrs;
-      default = { };
-    };
   };
 
   config = lib.mkIf cfg.enable {
-    services.gotosocial = {
+    services = {
-      enable = true;
+      gotosocial = {
         environmentFile = secrets.gotosocial.path;
         settings = {
           host = fqdn;
           account-domain = domain;
           protocol = "https";
           bind-address = "localhost";
-        instance-languages = [ "de" "fi" "en" ];
           instance-inject-mastodon-version = true;
           accounts-registration-open = true;
           instance-expose-public-timeline = true;
           letsencrypt-enabled = false;
-        inherit port;
+        };
-      } // cfg.settings;
         setupPostgresqlDB = true;
       };
 
-    modules.services.webserver.vHosts = {
+      webserver.vHosts = {
         ${domain}.locations = lib.listToAttrs (
           lib.map
             (path: {
@@ -59,4 +48,5 @@ in
         "${fqdn}".locations."/".proxyPort = port;
       };
     };
+  };
 }

modules/services/grafana.nix

@@ -1,32 +1,21 @@
 { lib, config, ... }:
 let
-  cfg = config.modules.services.grafana;
+  cfg = config.services.grafana;
   secrets = config.age.secrets;
   fqdn = "${cfg.subdomain}.${config.networking.domain}";
 in
 {
-  options.modules.services.grafana = {
+  options.services.grafana = {
-    enable = lib.mkEnableOption "Enable Grafana";
     subdomain = lib.mkOption {
       type = lib.types.str;
     };
-    config = lib.mkOption {
-      type = lib.types.attrs;
-    };
-    port = lib.mkOption {
-      type = lib.types.int;
-      default = 3300;
-    };
   };
 
   config = lib.mkIf cfg.enable {
     services.grafana = {
-      enable = true;
-
       settings = {
         server = {
           root_url = "https://${fqdn}";
-          http_port = cfg.port;
         };
 
         database = {
@@ -36,11 +25,7 @@ in
         };
 
         smtp = {
-          enabled = true;
+          from_name = "Grafana";
-          host = "horologium.uberspace.de";
-          from_address = "noreply@freun.dev";
-          from_name = "Vaultwarden";
-          user = "noreply@freun.dev";
           password = "$__file{${secrets.smtp-password.path}}";
         };
       };
@@ -59,7 +44,7 @@ in
       ];
     };
 
-    modules.services.webserver.vHosts.${fqdn}.locations."/".proxyPort = cfg.port;
+    services.webserver.vHosts.${fqdn}.locations."/".proxyPort = cfg.settings.server.http_port;
 
     services.postgresql = {
       enable = lib.mkDefault true;

modules/services/gtrackmap.nix

@@ -1,6 +1,6 @@
 { lib, config, inputs, ... }:
 let
-  cfg = config.modules.services.gtrackmap;
+  cfg = config.services.gtrackmap;
   fqdn = "${cfg.subdomain}.${config.networking.domain}";
 in
 {
@@ -8,23 +8,13 @@ in
     inputs.gtrackmap.nixosModules.default
   ];
 
-  options.modules.services.gtrackmap = {
+  options.services.gtrackmap = {
-    enable = lib.mkEnableOption "Enable GTrackmap";
     subdomain = lib.mkOption {
       type = lib.types.str;
     };
-    port = lib.mkOption {
-      type = lib.types.int;
-      default = 3200;
-    };
   };
 
   config = lib.mkIf cfg.enable {
-    services.gtrackmap = {
+    services.webserver.vHosts.${fqdn}.locations."/".proxyPort = cfg.port;
-      enable = true;
-      inherit (cfg) port;
-    };
-
-    modules.services.webserver.vHosts.${fqdn}.locations."/".proxyPort = cfg.port;
   };
 }

modules/services/hastebin.nix

@@ -37,7 +37,7 @@ in
       auth_tokens_file = secrets.hastebin-tokens.path;
     };
 
-    modules.services.webserver = {
+    services.webserver = {
       enable = lib.mkDefault true;
       vHosts.${fqdn} = {
         proxyBuffering = false;

modules/services/immich.nix

@@ -215,7 +215,7 @@ in
         wantedBy = [ "multi-user.target" ];
       };
 
-      modules.services.webserver = {
+      services.webserver = {
         enable = lib.mkDefault true;
         vHosts.${fqdn}.locations."/".proxyPort = cfg.port;
       };

modules/services/invidious.nix

@@ -1,26 +1,19 @@
 { config, lib, ... }:
 let
-  cfg = config.modules.services.invidious;
+  cfg = config.services.invidious;
   fqdn = "${cfg.subdomain}.${config.networking.domain}";
 in
 {
-  options.modules.services.invidious = {
+  options.services.invidious = {
-    enable = lib.mkEnableOption "Enable Invidious";
     subdomain = lib.mkOption {
       type = lib.types.str;
     };
-    port = lib.mkOption {
-      type = lib.types.int;
-      default = 3000;
-    };
   };
 
   config = lib.mkIf cfg.enable {
     services.invidious = {
-      enable = true;
       domain = fqdn;
       address = "127.0.0.1";
-      inherit (cfg) port;
 
       settings = {
         external_port = 443;
@@ -33,7 +26,7 @@ in
 
     services.postgresql.enable = lib.mkDefault true;
 
-    modules.services.webserver = {
+    services.webserver = {
       enable = lib.mkDefault true;
       vHosts.${fqdn}.locations."/".proxyPort = cfg.port;
     };

modules/services/owncast.nix

@@ -1,26 +1,20 @@
 { lib, config, ... }:
 let
-  cfg = config.modules.services.owncast;
+  cfg = config.services.owncast;
   fqdn = "${cfg.subdomain}.${config.networking.domain}";
 in
 {
-  options.modules.services.owncast = {
+  options.services.owncast = {
-    enable = lib.mkEnableOption "Enable Owncast";
     subdomain = lib.mkOption {
       type = lib.types.str;
     };
-    port = lib.mkOption {
-      type = lib.types.int;
-      default = 8080;
-    };
   };
 
   config = lib.mkIf cfg.enable {
     services.owncast = {
-      enable = true;
       openFirewall = true;
-      inherit (cfg) port;
     };
-    modules.services.webserver.vHosts.${fqdn}.locations."/".proxyPort = cfg.port;
+
+    services.webserver.vHosts.${fqdn}.locations."/".proxyPort = cfg.port;
   };
 }

modules/services/readeck.nix

@@ -17,7 +17,8 @@ in
   };
 
   config = lib.mkIf cfg.enable {
-    services.readeck = {
+    services = {
+      readeck = {
         package = pkgsUnstable.readeck;
         environmentFile = secrets.readeck.path;
         settings = {
@@ -25,7 +26,7 @@ in
         };
       };
 
-    modules.services.webserver = {
+      webserver = {
         enable = lib.mkDefault true;
         vHosts.${fqdn} = {
           proxyBuffering = false;
@@ -35,4 +36,5 @@ in
         };
       };
     };
+  };
 }

modules/services/syncthing.nix

@@ -1,14 +1,10 @@
 { config, lib, ... }:
 let
-  cfg = config.modules.services.syncthing;
+  cfg = config.services.syncthing;
   fqdn = "${cfg.subdomain}.${config.networking.domain}";
 in
 {
-  options.modules.services.syncthing = {
+  options.services.syncthing = {
-    enable = lib.mkEnableOption "Enable Syncthing";
-    dataDir = lib.mkOption {
-      type = lib.types.str;
-    };
     subdomain = lib.mkOption {
       type = lib.types.str;
     };
@@ -20,14 +16,12 @@ in
 
   config = lib.mkIf cfg.enable {
     services.syncthing = {
-      enable = true;
-      dataDir = cfg.dataDir;
       openDefaultPorts = true;
       guiAddress = "[::1]:${toString cfg.port}";
       settings.gui.insecureSkipHostCheck = true;
     };
 
-    modules.services.webserver = {
+    services.webserver = {
       enable = lib.mkDefault true;
       vHosts.${fqdn}.locations."/".proxyPort = cfg.port;
     };

modules/services/tailscale.nix

@@ -1,18 +1,9 @@
 { lib, config, ... }:
 let
-  cfg = config.modules.services.tailscale;
+  cfg = config.services.tailscale;
 in
 {
-  options = {
-    modules.services.tailscale = {
-      enable = lib.mkEnableOption "Enable Tailscale";
-    };
-  };
-
   config = lib.mkIf cfg.enable {
-    services.tailscale = {
+    services.tailscale.useRoutingFeatures = "server";
-      enable = true;
-      useRoutingFeatures = "server";
-    };
   };
 }

modules/services/vaultwarden.nix

@@ -1,28 +1,20 @@
 { lib, config, ... }:
 let
-  cfg = config.modules.services.vaultwarden;
+  cfg = config.services.vaultwarden;
   secrets = config.age.secrets;
   fqdn = "${cfg.subdomain}.${config.networking.domain}";
   port = config.services.vaultwarden.config.ROCKET_PORT;
 in
 {
-  options.modules.services.vaultwarden = {
+  options.services.vaultwarden = {
-    enable = lib.mkEnableOption "Enable Vaultwarden";
     subdomain = lib.mkOption {
       type = lib.types.str;
     };
-    secrets = lib.mkOption {
-      type = lib.types.str;
-    };
-    config = lib.mkOption {
-      type = lib.types.attrs;
-      default = { };
-    };
   };
 
   config = lib.mkIf cfg.enable {
-    services.vaultwarden = {
+    services = {
-      enable = true;
+      vaultwarden = {
         dbBackend = "postgresql";
         environmentFile = secrets.vaultwarden.path;
         config = {
@@ -33,15 +25,15 @@ in
           PASSWORD_ITERATIONS = 600000;
           ROCKET_LIMITS = "{json=10485760}";
           ROCKET_PORT = 8000;
-      } // cfg.config;
+        };
       };
 
-    modules.services.webserver = {
+      webserver = {
         enable = lib.mkDefault true;
         vHosts.${fqdn}.locations."/".proxyPort = port;
       };
 
-    services.postgresql = {
+      postgresql = {
         enable = lib.mkDefault true;
         ensureDatabases = [ "vaultwarden" ];
         ensureUsers = [{
@@ -50,4 +42,5 @@ in
         }];
       };
     };
+  };
 }

modules/services/webserver.nix

@@ -1,6 +1,6 @@
 { lib, config, ... }:
 let
-  cfg = config.modules.services.webserver;
+  cfg = config.services.webserver;
 
   types = {
     location = lib.types.submodule {
@@ -30,7 +30,7 @@ let
   };
 in
 {
-  options.modules.services.webserver = {
+  options.services.webserver = {
     enable = lib.mkEnableOption "Enable nginx";
     acme = {
       dnsChallenge = lib.mkEnableOption "Enable DNS challenge";

modules/services/workout-sync.nix

@@ -1,12 +1,12 @@
 { pkgs, inputs, config, lib, ... }:
 let
-  cfg = config.modules.services.workout-sync;
+  cfg = config.services.workout-sync;
   fqdn = "${cfg.subdomain}.${config.networking.domain}";
   port = cfg.port;
   workout-sync = inputs.workout-sync.packages.${pkgs.system}.default;
 in
 {
-  options.modules.services.workout-sync = {
+  options.services.workout-sync = {
     enable = lib.mkEnableOption "Enable Workout Sync";
     subdomain = lib.mkOption {
       type = lib.types.str;
@@ -18,7 +18,7 @@ in
   };
 
   config = lib.mkIf cfg.enable {
-    modules.services.workout-tracker.enable = lib.mkDefault true;
+    services.workout-tracker.enable = lib.mkDefault true;
 
     systemd.services.workout-sync = {
       enable = true;
@@ -46,7 +46,7 @@ in
       confinement.enable = true;
     };
 
-    modules.services.webserver = {
+    services.webserver = {
       enable = lib.mkDefault true;
       vHosts.${fqdn}.locations."/" = {
         proxyPort = port;

modules/services/workout-tracker.nix

@@ -1,32 +1,21 @@
 { pkgs, config, lib, inputs, ... }:
 let
-  cfg = config.modules.services.workout-tracker;
+  cfg = config.services.workout-tracker;
   fqdn = "${cfg.subdomain}.${config.networking.domain}";
   port = cfg.port;
+  package = inputs.nixpkgs-unstable.legacyPackages.${pkgs.system}.workout-tracker;
 in
 {
-  options.modules.services.workout-tracker = {
+  options.services.workout-tracker = {
-    enable = lib.mkEnableOption "Enable Workout Tracker";
-    version = lib.mkOption {
-      type = lib.types.str;
-    };
     subdomain = lib.mkOption {
       type = lib.types.str;
     };
-    port = lib.mkOption {
-      type = lib.types.int;
-      default = 3322;
-    };
   };
 
   config = lib.mkIf cfg.enable {
-    services.workout-tracker = {
+    services.workout-tracker = { inherit package; };
-      enable = true;
-      inherit port;
-      package = inputs.nixpkgs-unstable.legacyPackages.${pkgs.system}.workout-tracker;
-    };
 
-    modules.services.webserver = {
+    services.webserver = {
       enable = lib.mkDefault true;
       vHosts.${fqdn}.locations."/".proxyPort = port;
     };